1

I'm all on-board that Value is recently pushing for two-factor authentication on Steam accounts. I'm not happy that they force you to use the Steam mobile app because both on iOS and Android, it's a piece of trash. Plus, I already use Google authenticator for my other two-factor needs.

Does anyone know if Steam uses a rolling code algorithm compatible with standard rolling code generation software? With the right information, can I use GA for Steam? Or is it simply a timed code issued only to some unique ID associated with a mobile app installation linked to your account?

|improve this question

closed as off-topic by Neil Smithline, Graham Hill, WhiteWinterWolf, kasperd, Bob Brown Jan 6 '16 at 16:36

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "This question does not appear to be about Information security within the scope defined in the help center." – Neil Smithline, Graham Hill, WhiteWinterWolf
If this question can be reworded to fit the rules in the help center, please edit the question.

  • 2
    I'm not sure that we can answer this. Even if we did, Valve could change it without announcement as it's a proprietary tool. – Neil Smithline Jan 6 '16 at 4:29
  • Well that sounds like an answer. I didn't know it was proprietary. Do you have a source stating their two-factor auth API is proprietary? Generally an API isn't proprietary and the DMCA protects me if I want to write something that inter-operates with one. I guess no one has done any independent research? – David Cowden Jan 6 '16 at 5:27
  • It is proprietary by the fact that they don't use something like GA. Perhaps it's been researched but I doubt anyone here will know. Perhaps someone will answer. You never know. – Neil Smithline Jan 6 '16 at 5:32
  • I'm being pedantic, but that's not really a thorough definition of proprietary. You never know, maybe someone will (= – David Cowden Jan 6 '16 at 5:33
  • 2
    Perhaps 'trade secret' would be better? – Neil Smithline Jan 6 '16 at 5:37